This vulnerability in EMQ EMQX Enterprise (up to version 6.1.0) arises from improper authorization in an unspecified function within the session handling component. The flaw allows a remote attacker with low privileges to perform unauthorized actions without user interaction or complex attack conditions. The CVSS 4.0 base score is 5.3, reflecting medium severity. The vendor has not provided any advisory or patch, and the vulnerability details and exploit have been publicly disclosed.

An attacker with low privileges can remotely exploit this vulnerability to bypass authorization controls in the session handling component of EMQ EMQX Enterprise. This could lead to unauthorized access or actions within the system. No further impact details are provided, and no known exploits are reported in the wild beyond the public disclosure.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or issued a fix, users should monitor official channels for updates. Until a patch is available, consider restricting access to the affected versions and applying compensating controls to limit exposure.